From: cl@isbd.net   
      
   Knute Johnson  wrote:   
   >   
   > On 1/26/25 04:42, Chris Green wrote:   
   > > This is getting ridiculous!   
   > >   
   > > Once upon a time one just copied an image to a card, enabled ssh and   
   > > hey presto, you could log in as user pi with password raspberry.   
   > >   
   > > No chance now.   
   > >   
   > > I would point out that I'm not, in general, a complete numpty.  I've   
   > > been using Pis (and other similar things) for many many years.   
   > >   
   > >   
   > > So, having found out why the above simple approach doesn't work I have   
   > > tried:-   
   > >   
   > >      Use rpi-imager, wasted first attempt because it wasn't obvious where   
   > >      one entered user/password.  Second attempt seemed to boot the Pi   
   > >      OK but it never appeared on my LAN so not much help there. (At   
   > >      least my first dd copied image appeared on the LAN)   
   > >   
   > >      Manually editing userconf.txt with my /etc/shadow encrypted   
   > >      password from my Linux box got to a login prompt but the password   
   > >      is somehow wrong.   
   > >   
   > >      Finally I managed to get a login working by creating a   
   > >      ~/.ssh/authorized keys file with the public key from my Linux   
   > >      system in it.  Phew!   
   > >   
   > I can offer some suggestions: use version 1.85 of the Imager program.   
      
   That is the version I'm using.   
      
      
   > It has solved some of the password entry issues of the older version.   
   > Also it allows you to use a different user name than pi, but I like pi   
   > so I use it.  Use the latest Raspberry Pi OS, either 64 or 32 bit as   
   > appropriate.   
   >   
   It's just over-complicated for something which should really be quite   
   simple.   
      
   Is there **really** such a big security issue with default login names   
   and passwords on Raspberry Pis?  Surely almost all of them are going   
   to be on home networks behind NAT routers and also surely no one is   
   going to (without thinking about it a bit!) put confidential data on   
   one.  Anyone installing any system which is going to be directly out   
   on the internet should be very aware of the risks and will do what's   
   required.   
      
   --   
   Chris Green   
   ·   
      
   --- SoupGate-DOS v1.05   
    * Origin: you cannot sedate... all the things you hate (1:229/2)